User Rights — Azure AI Weather (GDPR)

Version: 1.0.0 Effective date: 15 July 2026 Last reviewed: 15 July 2026

Revision history

1. Overview

Under the EU General Data Protection Regulation (GDPR), you have rights over your personal data. This document explains how to exercise them in Azure AI Weather.

Operator

Diogo Botelho Moniz

Trading as

Azure AI Weather

A FrontSea Intelligence product

Portugal

Contact: contact@azureai.pt

Response time: Within 30 days (extendable to 60 for complex requests)

2. Right of access (Art. 15)

You may request a copy of personal data we hold about you.

Self-service: GET /api/privacy/export (authenticated)

Export includes: profile, vessels, voyages summary, chat memory, consent records, device sessions, privacy audit log.

3. Right to rectification (Art. 16)

Correct inaccurate data via:

• Account settings / Profile page
• PUT /api/accounts/me/account
• PUT /api/accounts/me/skipper, /me/vessel, /me/preferences

Contact us if data in Black Box or messaging cannot be self-corrected.

4. Right to erasure / "right to be forgotten" (Art. 17)

Delete your account and associated data:

DELETE /api/privacy/account
Body: { "confirm": "DELETE" }

Partial deletion:

Exceptions: We may retain data where required by law (tax, fraud prevention, legal claims).

5. Right to restriction (Art. 18)

Request that we limit processing while a dispute is resolved. Email contact@azureai.pt with:

• Your account email
• What processing to restrict
• Reason for restriction

6. Right to data portability (Art. 20)

Receive your data in machine-readable JSON:

GET /api/privacy/export

You may transfer this data to another service.

7. Right to object (Art. 21)

Object to processing based on legitimate interest (e.g. security logging). Email contact@azureai.pt.

Marketing: Opt out via account settings or unsubscribe link. Consent recorded at POST /api/privacy/consent.

8. Rights related to automated decision-making (Art. 22)

Azure AI Weather provides advisory GO/CAUTION/NO-GO and operational risk scores. These:

• Do not produce legal or similarly significant effects
• Require human oversight — the skipper decides
• Are explained in Operational Risk Methodology

You may request human review of automated outputs by contacting support.

9. AI transparency

• AI Act Compliance
• AI System Card
• Consent type ai_transparency recorded at registration

LLM responses are generated from your input + weather context. We do not use your data for model training without consent.

10. Consent withdrawal

Withdraw marketing consent anytime. Core service consent (Privacy Policy, Terms) may require account deletion to fully withdraw.

View consent history: GET /api/privacy/consent

11. Complaints

You may lodge a complaint with:

• Portugal: CNPD — www.cnpd.pt
• Your EU member state supervisory authority

We encourage contacting us first at contact@azureai.pt.

12. Audit trail

Privacy-related actions are logged (without passwords or tokens):

GET /api/privacy/audit-log

*This guide supplements but does not replace legal advice.*